← CVE Intelligence

CVE-2025-41772

wwwupdate.cgi Session token in URL PUBLISHED

Description (CNA)

An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoint in UBR.

Affected (CNA)

Vendor / productVersions
MBS / UBR-01 Mk IIaffected 0.0.0 before 6.0.1.0
MBS / UBR-02affected 0.0.0 before 6.0.1.0
MBS / UBR-LONaffected 0.0.0 before 6.0.1.0

CWE

CWE-598

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.